Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/df7823cf303b5324bbeb62bd403d9f660536d4b3.roa
File: df7823cf303b5324bbeb62bd403d9f660536d4b3.roa (raw, json)
Hash identifier: 1BlLz6+OGJeGlBtmSsRIi3VZtCE+bez5rWzWpYSwJwE=
Subject key identifier: 20:91:F9:83:A3:FE:43:33:03:53:A5:20:00:D0:7A:6D:A6:9A:F6:BA
Certificate issuer: /CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Certificate serial: 0D6BF6
Authority key identifier: C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/df7823cf303b5324bbeb62bd403d9f660536d4b3.roa
Signing time: Wed 24 Mar 2021 14:37:39 +0000
ROA not before: Wed 24 Mar 2021 14:37:36 +0000
ROA not after: Tue 24 Mar 2026 14:37:36 +0000
asID: 52263
IP address blocks: 138.118.80.0/22 maxlen: 24
170.150.56.0/22 maxlen: 24
170.246.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 20:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879606 (0xd6bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Validity
Not Before: Mar 24 14:37:36 2021 GMT
Not After : Mar 24 14:37:36 2026 GMT
Subject: CN=df7823cf303b5324bbeb62bd403d9f660536d4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:c6:4e:55:51:d0:47:26:ba:a8:6a:ae:dc:
08:2d:fb:96:11:dd:79:b9:40:9a:0d:3d:a8:89:41:
d6:79:1a:d3:b5:ca:18:28:3d:0b:08:be:47:e7:7f:
f6:e1:e8:16:39:1e:90:2f:af:02:4b:c4:c3:7c:55:
b8:78:6f:c7:fd:89:c1:fb:0c:9e:ee:89:cc:cc:e2:
7e:10:83:22:7c:9c:a7:c8:d6:a3:bc:b2:b6:d8:92:
87:46:d2:41:9b:44:96:8f:e5:40:3e:cb:5d:76:20:
51:eb:9e:cf:c9:b5:2c:a4:bc:8d:05:78:d6:7b:e3:
33:5d:07:05:22:7d:2e:29:53:34:74:e3:5a:05:32:
44:8c:62:43:37:6f:ac:c1:c9:17:39:4e:20:42:4f:
91:71:9a:7e:6f:33:78:ea:5c:94:6e:f0:1a:96:e3:
13:38:3f:e4:c0:19:2e:8f:63:3b:a3:38:52:20:8d:
38:d0:10:2b:11:5a:22:06:ce:59:1e:ba:72:cf:b5:
c1:eb:14:9c:be:46:74:4f:b6:ee:fe:98:a1:44:67:
ba:d7:42:d8:80:6f:d1:26:9b:51:1c:30:9b:a2:9a:
d9:11:5a:17:5b:b9:16:e7:b4:f7:9f:04:26:17:b3:
fd:ac:17:5d:2c:e2:22:52:76:54:4e:cb:97:1e:06:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:F9:83:A3:FE:43:33:03:53:A5:20:00:D0:7A:6D:A6:9A:F6:BA
X509v3 Authority Key Identifier:
keyid:C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/df7823cf303b5324bbeb62bd403d9f660536d4b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.80.0/22
170.150.56.0/22
170.246.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:aa:69:81:5b:d9:32:fe:f6:9a:46:01:62:7a:d4:bf:de:4e:
49:e9:2a:f7:64:aa:22:6e:fd:f6:e6:56:56:ee:a4:68:0e:4b:
c8:d1:38:53:15:b3:33:60:a2:b1:7b:81:7f:ee:ba:8e:eb:de:
06:28:d8:0a:2a:ec:82:31:58:14:27:1e:a7:7b:a0:56:78:b8:
5f:3d:24:63:0b:57:55:cd:7e:52:7b:19:d8:2a:5b:8e:a7:b8:
f5:a0:54:18:82:52:e0:8f:00:68:9d:5a:b9:67:44:ee:37:96:
9f:b9:4c:7e:50:d9:46:85:a3:94:d4:c5:7b:44:3b:b2:ac:05:
6b:df:cd:2b:e9:e3:ee:ff:a1:24:07:35:5b:88:6f:90:c2:de:
04:74:55:eb:2c:2f:11:c7:31:6b:2b:50:1d:dc:c2:63:47:b8:
9c:e3:4d:a6:6a:ba:9d:4b:99:8a:76:fb:7c:3a:88:00:54:93:
9f:b1:d4:1b:36:f5:7e:c7:85:c4:35:6b:bd:5a:11:15:64:d4:
d9:b3:e6:af:b4:72:48:85:98:b8:83:d3:a6:8c:b5:58:9b:8e:
06:2e:52:76:16:b2:6c:43:56:4b:3e:36:90:62:fd:a5:8c:57:
4f:a5:fa:90:1c:59:05:49:56:10:23:ac:d0:8e:a2:0b:34:de:
37:96:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 00:18:31 2024 by rpki-client on console-ams.rpki-client.org